Portfolio
My Blog
Scroll down to discover
Search
Categories

Log4j-scan: Tool scan tìm các trang web dính lỗi log4j

December 19, 2021Category : Bug & Security

Scan Website

$ python3 log4j-scan.py -u https://log4j.lab.secbot.local

Quét một URL duy nhất bằng tất cả các phương thức Request: GET, POST (form được mã hóa url), POST (body JSON)

$ python3 log4j-scan.py -u https://log4j.lab.secbot.local --run-all-tests

Tìm bypass WAF.

$ python3 log4j-scan.py -u https://log4j.lab.secbot.local --waf-bypass

Quét danh sách các URL

$ python3 log4j-scan.py -l urls.txt

Cách cài đặt

$ pip3 install -r requirements.txt

Hỗ trợ Docker

git clone https://github.com/fullhunt/log4j-scan.git
cd log4j-scan
sudo docker build -t log4j-scan .
sudo docker run -it --rm log4j-scan

# With URL list "urls.txt" in current directory
docker run -it --rm -v $PWD:/data log4j-scan -l /data/urls.txt
01.
© Oliver / All rights reserved.
To top